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DETAILED ACTION 

1 . This communication is in response to applicant's amendment filed May 1 , 2006. 
Claims 1 , 16, 19, and 22 have been amended. Claims 1-24 are currently pending in this 
case. 

Specification 

2. The amendment to the specification at paragraph 0022 is, hereby acknowledged 
as received. 

Response to Arguments 

3. Applicant's arguments filed May 12, 2006 have been fully considered but they .are 
not persuasive. , 

4. Applicant argues, with respect to claims 1-24 that nothing in the cited art 
suggests or discloses converting unencrypted data to be compatible with target data store; 
and populating target data store with the converted data. However these differences are 
only found in the nonfunctional descriptive material and are not functionally involved in the 
steps recited. The migration steps, taught by Blakley, teach about the migration of data 
from a Source Domain to a Target Domain, (e.g. Col. 10, lines 46-67) that may be 
customer-tailored according to the user's particular needs, would be performed the same 
regardless of the data. ; ?e^ f . mom,,,,-^. . 

5. Thus, this descriptive material will not distinguish the claimed invention from the 
prior art in terms of patentability, see In re Gulack, 703 F.2d 1 381 , 1 385, 21 7 USPQ 401 , 
404 (Fed. Cir. 1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 1031 (Fed. Cir. 1994). 
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6. Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to read selected data be it unencrypted or encrypted data 
from source data store; convert unencrypted/encrypted data to be compatible with target 
data store; and populate target data store with the converted data, because such data 
does not functionally relate to the steps in the method claimed and because the subjective 
interpretation of the data does not patentably distinguish the claimed invention. 

7. Applicant further argues that nothing in the cited prior art discloses or suggests a 
password associated with the identification, then submitting the received identification and 
received password to the source user authenticator. Mehring teaches that it is known in the 
art to provide if the target data store does not include a . password associated with the 
identificationi'then submit the received identification and received password to the source 
user authenticator. (e.g.', Col. 10, lines 49-67, CoL 11, lines 1-10). It would have been 
obvious to one having ordinary skill in the art at the time the invention was made to provide 
the authentication procedure of Blakley with if the target data store does not include a 
password associated with the identification, then submit the received identification and 
received password to the source userauthenticator of Mehring^n order 'to facilitate the use 
of the data during the migration phase of the data transfer. 

8. Further, it would have been obvious to one having ordinary skill in the art at the time 
of the invention was made to if the target data store does not include a password 
associated with the identification, then Submit the' received id received 
password to the source user authenticator since it is known in the art that during a data 
base migration period, if the target data store does not include a password associated with 

'lakks'y* vv.ii it ih., d.i tor.." 1 j r. v..;. .-. 
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the identification, then submit the received identification and received password to the 
source user authenticated. 

9. Applicant further argues, with respect to claims 16, 19 and 22, that nothing in the 
cited prior art discloses or suggests populating the data store with the received password 
from the user. Mehring teaches that it is known in the art to provide wherein the action of 
prompting for and receiving the identification and a password from the user after the initial 
submission of the identification from the user occurs after determining that the target data 
store does not include a password associated with the identification; and, wherein the 
action further comprises using the source user authenticated to prompt for and receive the 
identification and a password from the user after the initial submission of the identification 
from the user. (e.g. fig. 6) : " °' : 1 

1 0. It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to provide the security method of Blakley wherein the action of 
prompting for and receiving the identification and a password from the' User after the 
initial submission of the identification from the user occurs after determining that the target 
data store does not include a password associated with the identification; and, wherein the 
action further comprises using the source user authenticated to prompt for and receive the 
identification and a password from the user after the initial submission of the identification 
from the user of Mehring, in order to authenticate the user requesting the data. Also, It 
would have been obvious to one having ordinary skill in the art at the time the invention was 
made to provide the password/unique identification element of Blakley with the prompting 
the user for an identification of Mehring, in order to increase the ^security'in accessing data. 
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Further, it would have been obvious to modify the teachings of Blakley, to provide the step 
of prompting the user for identification. 

1 1 . Applicant argues that nothing in the cited prior art teaches or suggests an interface 
that intercepts a request to the source user authenticator from a user seeking access to 
information protected by the target user authenticator. It would have been obvious to one 
having ordinary skill in the art at the time of the invention was made to if the target data 
store does not include a password associated with the identification, then submit the 
received identification and received password to the source user authenticator since it is 
known in the art that during a data base migration period, if the target data store does not • ■ 
include a password associated with the identification, then submit the received identification 
and received password to the source user authenticator. 

' Claim Rejections - 35 USC § 103 

:.. ..-q'j.'C '-,3t -oth!'" :•• *.nc i>.' '"nor ■ ,r teaches or sugceru. :v, r.v-rte.ne - 

1 2. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title, if, the differences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary 
skill in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. . : .:<ir ;• asr.\or«" >:.:^ v v Vr. ■ rferrttocatiOR, men sue.:, i ' 

13. Claims 1-24 are rejected under 35 U.S.C. 103(a) as being unpatentable over Blakley, 
III et al. U.S. Patent 5,832,211 [Blakley], and further in view of Mehring et al. U.S. Patent 
6,609,1151311 [Mehring]. 

•" " )' . . t •!• tilt- ' : >•: 

14. As per claims 1 , 1 6 and 22: Blakley discloses: Read selected unencrypted data from 
source data store. For example Col. 7, lines 35-37. Blakley does not expressly show, 
convert unencrypted data to be compatible with target data store; and populate target data 

i... ... , foi •.: i ... this -U!t- acibc.. 

• •• ••' ■ ■ • ••■ 
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store with the converted data. However these differences are only found in the 
nonfunctional descriptive material and are not functionally involved in the steps recited. The 
migration steps, taught by Blakley, teach about the migration of data from a Source Domain 
to a Target Domain. Col. 10, lines 46-67, that may be customer-tailored according to the 
user's particular needs, would be performed the same regardless of the data. 

1 5. Thus, this descriptive material will not distinguish the claimed invention from the 
prior art in terms of patentability, see In re Gulack, 703 F.2d 1381 ,1385, 217 USPQ 401 , 
404 (Fed. Cir. 1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 1031 (Fed. Cir. 1994). 

16. Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to read selected data be it unencrypted or encrypted data 
from source data store; (^rivert'unencrypted/encrypted data* to be compatible with target 
data store; and populate target data store with the converted data, because such data 
does not functionally relate to the steps in the method claimed and because the subjective 
interpretation of the data does not patentably distinguish the claimed invention. 

1 7. Blakley further discloses:^ p " Receive'ident1ficatiori ; Wm c a tiser^seeking access to 
information protected by the target user authenticator. For example Col. 7, lines 17-35. 

18. Locate the corresponding identification in the target data store and determine 
whether the target data store includes a password associated with tne identification. For 
example Col. 1 1 , lines 44-55, Blakley teaches locating the^cdrrespohding identificationih 
the target data store, which includes a password, associated with the user's 
identification. 

■ • ..■ ny r.-u/'o to the p\ it, .10 rv^thod «. s aiiiied aud,0eca*uW 1 :C> . ul ? Active- 
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1 9. Receive a password from the user associated with the received identification. For 
example Col. 1 1 , lines 25-67. Blakley discloses the claimed invention except for if the 
target data store does not include a password associated with the identification, then 
submits the received identification and received password to the source user 
authenticator. Mehring teaches that it is known in the art to provide if the target data 
store does not include a password associated with the identification, then submit the 
received identification and received password to the source user authenticator. Col. 10, 
lines 49-67, Col. 1 1 , lines 1-10. It would have been obvious to one having ordinary skill 

in the art at the time the inventionlwas^made to provide the authentication procedure r'oye . 
Blakley with the if the target data store does not include a password associated with the 
identification, then submit the received identification and received password to the 
source user authenticator of Mehring, in order to facilitate the use of the data during the 
migration phase of the data transfer. p:;SSv ^ " 

20. Further, it would have been obvious to one having ordinary skill in the art at the time 
of the invention was made to if the target data store does not include a password 
associated with the identification, then submit the received identification and received 
password to the source user authenticator since it is known in the art that during a data 
base migration period, if the target data store does not include a password associated with 
the identification, then submit the received identification and received password to the 
source user authenticator. ^ ; " ' vr ' n r ^ ' 

21 . Monitor the source User authenticator for an approval response; for example 
Col. 8, lines 1 -1 0, Col. 9, lines 34-67. 



Application/Control Number: 10/075,336 Page 8 

Art Unit: 3621 

22. Blakley discloses the claimed invention except for on receipt of an approval 
response from the source user authenticator populates the target data store with the 
received password associating the received password with the corresponding identification. 
It would have been obvious to one having ordinary skill in the art at the time of the invention 
was made to on receipt of an approval response from the source user authenticator 
populate the target data store with the received password associating the received 
password with the corresponding identification, since it is known in the art that to facilitate 
the complete transfer of data, when data is found missing from the original source, it is 
restored by the data from the original source. 

23. Authenticate the identification and password using the target user authenticator. For 
example Col. 23, lines 5-35. 1eu r Uif 

24. As per claim 2: ? 1 

Blakley further discloses: If, after determining whether the target data store includes a 
password associated with the identification, the target data store does include a password 
associated with the identification, then authenticate the identification anci'password 
using the target user authenticator. For example Col. 7, lines i 5-20P r " * iv 1 u 

25. As per claim 3: 

Blakley further discloses: Receiving a password in a single submission from the user in 
conjunction with receiving the identification from the user. For example Col. 7, lines 1 5-35 

26. As per claims 4, 5, 1 7, 20 and 23: ' •"" ih " ?:::v ; "' ' 
Blakley discloses the claimed invention except for the receiving a password in a submission 
from the user after the initial submission of the identification from the user. However, 
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Blakley does disclose the use of a password and a corresponding unique account 
identification number. Col. 7, lines 15-20. Mehring teaches that it is known in the art to 
provide a receiving a password in a submission from the user after the initial submission of 
the identification from the user. Col. 10, lines 60-67. It would have been obvious to one 
having ordinary skill in the art at the time the invention was made to provide the 
password/unique identification element of Blakley with the receiving a password in a 
submission from the user after the initial submission of the identification from the user of 
Mehring, in order to increase the security in accessing data. Further, It would have been 
obvious to modify the teachings of Blakley, to provide the step of receiving a password Jn a 
submission from the user after the initial submission of the identification from the user. 

27. Since the applicant has not disclosed that receiving a password in a submission 
from the user after the initial submission of the identification from the user solves any stated 
problem in a new or unexpected way oris for any particular purpose whichis unobvious to 
one of ordinary skill and it appears that the claimed feature does not distinguish the 
invention over similar features in the prior art since, the teachings of Blakley will perform the 
invention as claimed by the applicant with any means, method, or product to receiving a 
password in a submission from the user after the initial submission of the identification from 
the user. 

28. As per claims 6, 18, 21 and 24: 

Blakley discloses the claimed invention, as discussed above, except for the step of 
prompting for and receiving the identification and a password from the User after the initial 
submission of the identification from the user. It would have been an obvious to modify the 
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teachings of Blakley to provide the step of prompting for and receiving the identification and 
a password from the user after the initial submission of the identification from the user. 

29. Since the applicant has not disclosed that prompting for and receiving the 
identification and a password from the user after the initial submission of the identification 
from the user solves any stated problem in a new or unexpected way or is for any particular 
purpose which is unobvious to one of ordinary skill and it appears that the claimed feature 
does not distinguish the invention over similar features in the prior art since, the teachings 
of Blakley will perform the invention as claimed by the applicant with any means, method, 
or product to prompting for and receiving the identification and a password from the user 
after the initial submission of the identification from the user. 

30. As per claim 7: ' • ~ 

Blakley discloses the claimed invention except for the wherein the actioh bf prompting for 
and receiving the identification and a password from the user after the initial submission of 
the identification from the user occurs after determining that the target data store does not 
include a password associated with the identification; and; wherein the action further 
comprises using the'source' user authenticator to 'prompt for- and receive the identification' 
and a password from the user after the initial submission of the identification from the user. 

31 . Mehring teaches that it is known in the art to provide wherein the action of prompting 
for and receiving the identification and a password from the user after the initial submission 
of the identification from the'iiseroccurs after determining* that the target data store does 
not include a password associated with the identification; and, wherein the action further 

* v.. . w>.)L,i wi,vi-*.h. ........ 

, ..in uSft sntu. d^^rmnmu thaUho laigei data ... :v. .^.v.;not 
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comprises using the source user authenticator to prompt for and receive the identification 
and a password from the user after the initial submission of the identification from the user. 

32. It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to provide the security method of Blakley with wherein the action of 
prompting for and receiving the identification and a password from the user after the initial 
submission of the identification from the user occurs after determining that the target data 
store does not include a password associated with the identification; and, wherein the 
action further comprises using the source user authenticator to prompt for and receive the 
identification and a password from the user after the initial submission of the identification 
from the user of Mehring, in order to authenticate the user requesting the data. 

33. As per claims 8 and 9: 

Blakley discloses the claimed invention except for wherein while the source user 
authenticator' is receiving the submitted password from the~user,' capturing the password 
provided by the user in response to4he source authenticator prompting and using the 
captured password as the received password. 

34. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to wherein while the source user authenticator is receiving the 
submitted password from the user.'capturing the password provided by the user in ~ 
response to the source authenticator prompting and using the captured password as the 
received password since it is known in the art to use the password provided by the user in 
response to the source authenticator prompting and using the captured password as the 
received password. • dutiu> e^yi^r ••.^•<- ie nr. >. • 
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35. As per claim 10: 

Blakley does not expressly show wherein the target data store is an LDAP compliant 
directory service. However, Blakley does disclose about Open Systems Foundation (OSF) 
Distributed Computing Environment (DCE). For example Col. 5, lines 56-67, Col. 7, lines 1- 
10. The difference between the prior art and the application is only found in the 
Nonfunctional descriptive material and is not functionally involved in the steps recited. The 
migrating steps would be performed the same regardless of the type of data store involved. 
Thus, this .descriptive material will not distinguish the claimed invention from the prior art in 
terms of patentability; see In re Gulack, 703 F.2d 1381, 1385, 217 USPQ 401, 404 (Fed? v? 
Cir. 1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 1031 (Fed. Cir. 1994). 

35. Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to use the type of data store compatible with their system 
because the type of data' store 'doe's not functionally' relate tc?the-steps in the method JS ' ' 
claimed and because the subjective interpretation of the data store does not patentably 
distinguish the claimed invention. 

36. As per claim 11: !! ' - \ :,,v ' Uiv ^ 5,1 v V " 

Blakley does not expressly 'show wherein the ta^efdata'^s^fe^i^a^relatioh'al database'.^ 6 
However, Blakley does disclose about Open Systems Foundation (OSF) Distributed 
Computing Environment (DCE) For example Col. 5, lines 56-67, Col. 7, lines 1-10. The 
difference between the prior art and the application is only found in the nonfunctional 
descriptive material and is not functiohaliy involved in'the'steps^reSited^T he migrating steps 
would be performed the same regardless of the type of data store involved. Thus, this 
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descriptive material will not distinguish the claimed invention from the prior art in terms of 
patentability, see In re Gulack, 703 F.2d 1381, 1385, 217 USPQ 401, 404 (Fed. Cir. 1983); 
In re Lowry, 32 F.3d 1 579, 32 USPQ2d 1 031 (Fed. Cir. 1 994). 

37. Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to use the type of data store compatible with their system 
because the type of data store does not functionally relate to the steps in the method 
claimed and because the subjective interpretation of the data store does not patentably 
distinguish the claimed invention. 

38. As per claims 12 and 13: 

Blakley does not expressly show wherein the source data store is a relational database. 
However, Blakley does disclose about OpenSystems Foundation (OSFj Distributed " ; 
Computing Environment (DCE) For example Col. 5, lines 56-67, Col. 7, lines 1-10. The 
difference between the prior art and the application is only found in the nonfunctional 
descriptive material and is not functionally involved in the steps recited: The migrating steps 
would be performed the' same regardless of thVtype 6f data stores involved. Thus, this 
descriptive material will not distinguish the claimed invention from the prior art in terms of 
patentability, see In re Gulack, 703 F.2d 1381, 1385, 217 USPQ 401, 404 (Fed. Cir. 1983); 
In re Lowry, 32 F.3d 1579; 32 USPQ2d 1031 (Fed. Cir. 1994). 

39. Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to use the type of data store compatible with their system 
because the type of data stores does not functionally relate to the steps in the method 



pi .or i .'i I'nd the cr.'unotitio :s i..-uy lGw..ici in ...^ tie. 
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claimed and because the subjective interpretation of the data stores does not patentably 
distinguish the claimed invention. 

40. As per claim 14: 

Blakley further discloses: wherein the user is a person. For example Col. .7; lines,. 15-35. 

41. As perclaim-15: 

Blakley further discloses: wherein the user is a software object. For example, Col. 7, lines 
15-35. 

42. As per claim 19: 

Blakley discloses the claimed invention except for intercepting a request to the source user , 
authenticator from a user seeking access to information protected by the target user 
authenticator. Mehring teaches that it is known in the art to provide intercepting a request to 
the source user authenticator from a user seeking access to information protected by the 
target user authenticator. For example Col. 9, lines 1 5-50. 

43. It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to provide the push/pull password system of Blakley, with the 
intercepting a request to the source user authenticator from a user seeking access to 
information protected by the target user authenticator of Mehring, in order to facilitate the 
approval of the user, with a minimum interaction by the user, to complete the authentication 
procedure. 

44. Blakley discloses the claimed invention except for prompting the user for an 
identification. However, Blakley does' disclose the use of user identification: Mehring 
teaches that it is known in the art to prompting the user for an identification; receiving the 
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identification from the user. Col. 10, lines 60-67. It would have been obvious to one having 
ordinary skill in the art at the time the invention was made to provide the password/unique 
identification element of Blakley with the prompting the user for an identification of Mehring, 
in order to increase the security in accessing data. Further, it would have been obvious to 
modify the teachings of Blakley, to provide the step of prompting the user for an 
identification. 

45. Since the applicant has not disclosed that prompting the user for an identification; 
receiving the identification from the user solves any stated problem in a new or unexpected 
way or is for any particular purpose which is unobvious to one of ordinary skill and it 
appears that the claimed feature does not distinguish the invention over similar features in 
the prior art since, the teachings of Blakley will perform the invention as claimed by the 
applicant with any means; 'method' or product to receiving a 1 password irva submission from 
the user after the initial submission of the identification from the user; locating the 
corresponding identification in the target data store and determining whether the target data 
store includes a password associated with the identification; For example Col. 7, lines 15- 

45. If the target data store does include a password associated with the identification, 
then: authenticating the identification and password using the target user using the target 
user authenticator. Col. 7, lines 15-20. 

46. Examiner's Note: Examiner has cited particular columns and line numbers in the 
references as applied to the'claims°bel6w for the'eonveriience of the applicant Although" 1 
the specified citations are representative of the teachings in the art and are applied to the 
specific limitations within the individual claim, other passages and figures may apply as 

. : ..i(i..-c/-,n it. ihw tr>rq-:?t , ta>t»ore an'.: deiorminii-iyv.iiei'f^. ..ft: .u.-au.daiu 
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well. It is respectfully requested from the applicant, in preparing the responses, to fully 
consider the references in entirety as potentially teaching all or part of the claimed 
invention, as well as the context of the passage as taught by the prior art or disclosed by 
the examiner. 

Conclusion 

47. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. Leah et al. US 6,986,038 131 TECHNIQUE FOR SYNCHORNIZING SECURITY 
CREDENTIALS FROM A MASTER DIRECTORY, PLATFORM, OR REGISTRY. Discloses 
prompting of the user. 

48. THIS ACTION IS MADE FINAL Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). l: 

49. A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

50. Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Cristina Owen Sherr whose telephone number is 571- 

272-671 1 . The examiner can normally be reached on 8:30-5:06 Monday through 
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51 . If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Trammell can be reached on 571-272-6712. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

52. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. ra 
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